DATASHEET

Ivanti Patch for Configuration Manager
Data breaches stemming from vulnerabilities inthird-party software take 286 days to identify
and contain and cost $4.33M on average.1 Ivanti
Patch for Configuration Manager deploys thirdparty application updates that fix vulnerabilities forthird-party software as well as operating systems
and Microsoft applications without any additional
complexity, infrastructure or training. Using thesame workflows in Configuration Manager, Patchfor Configuration Manager installs as a native plugin so you can automate your third-party patching
program and receive advanced third-party
software functionality Microsoft does not provide.

Update and deploy new applications
You can select and automatically publish patchesfrom an extensive third-party catalog of vendors. As
more applications are added to the environment, you
can devote more time to other activities. Patch for
Configuration Manager eliminates many of the manualsteps normally performed, such as identifying new
applications that need updates and finding existing
third-party applications running on workstations andservers.
Native integration enables you to manage all theinstallation parameters through the console interface
as you do for Microsoft installations.

Automate important workflows
Patch for Configuration Manager allows you to use
familiar workflows to automate various tasks frompublishing to deployment with the goal of providing set
it and forget it functionality for some of your key tasks.
ivanti.com

The functions available within the automation
scheduler allow for creating automated tasks that,when executed, publish the updates defined,
continuing through to deployment, all based on yourdefined preferences.

Streamline deployments
Sorting through deployments can be time-consuming■ Automatically match available updates and publish

with Configuration Manager. Patch for Configuration

based on a vulnerability assessment from yourManager allows you to select from your publisheddesired vendor.

applications and deploy from one screen, significantly

The Automation Scheduler is a simple calendar

simplifying the deployment process. It also isview that allows easy access and visibility into yourvaluable when you need to ensure business critical

automated tasks. Save time by viewing and managing

vulnerabilities are addressed as quickly as possible.

all upcoming tasks at a single glance from one locationwithin Configuration Manager.
The Publish Updated by CVE function pulls
vulnerability scan results from a designated locationand matches CVEs with available patches based onyour defined schedule. The compiled list of missing
patches is then updated and automatically published,
as well as deployed, saving you hours of work.
The Publish Recommendations function detects theproducts installed on endpoints and publishes anddeploys recommended updates based on your defined■ Automatically publish recommended updates

based on the Configuration Manager database ofinstalled applications.
■ Supports your migration to modern managementwith the Intune portion of the integration.

Integrate with Intune
Patch for Configuration Manager provides astreamlined workflow for publishing third-party
updates via MECM. It also supports your migration
to modern management by providing publishing■ Deploy now functionality for business-criticaldeployments.
■ Set it and forget it functionality to automate

critical workflows from publish to deployment.
■ Save time deploying scripts via custom patch

capabilities for Microsoft Intune. Configuration

templates that apply scripts each time updates

Manager administrators select from a list of available

are released.

third-party applications and import selections into

■ Search and publish patch data using advanced

Intune for installation and updates as defined byfilters that narrow criteria using standard andIntune processes.

custom filters.
■ View and manage all products published toschedule. This easily automated workflow follows anefficient process that minimizes vulnerabilities andKey benefits

ensures your endpoints are up to date.

Deliver visibility forcompliance reporting

The Synchronize Applications function allows for

You can assess your environment and understand youra specific set of applications to be selected andpatch compliance using Configuration Manager’s built-

imported into either Microsoft Endpoint Configurationin reporting features. You can also pull patch metadata

Manager (MECM) or Intune. Those applications canthat can be applied for either compliance or audit

then be scheduled for automated updates based onneeds. And integrated compliance reporting means

your defined preferences.

you have visibility into your third-party and Microsoft

Windows Server Update Services (WSUS).
■ Localized in 10 languages for international

support.

information in your MECM reports.

Ivanti Patch for Configuration Manager | DATASHEET

2ivanti.com
1 800 982 2130
sales@ivanti.com

Patch management market leader

About Ivanti

The Ivanti patch catalog is one of the industry’s mostIvanti makes the Everywhere Workplace possible. In

comprehensive, currently securing more than 180

the Everywhere Workplace, employees use myriad

million endpoints globally and deploying over 1.2 billion

devices to access IT networks, applications and data

patches annually. We also have an expert team thatto stay productive as they work from anywhere. Thereleases extensive detailed information on pre-tested

Ivanti automation platform connects the company’s

patches at least twice weekly. Patch for MEM patches

industry-leading unified endpoint management, zero

hundreds of popular applications, including Adobe

trust security and enterprise service management

Reader, Google Chrome, Mozilla Firefox, Java andsolutions, providing a single pane of glass formany more.

enterprises to self-heal and self-secure devices, andRequirements

self-service end users. More than 40,000 customers,
including 96 of the Fortune 100, have chosen Ivanti toFor system requirements, visit:

discover, manage, secure and service their IT assets

https://help.ivanti.com/iv/help/en_US/PAT/24/Topics/

from cloud to edge, and deliver excellent end user

System_requirements.htm

experiences for employees, wherever and however

For a current list of covered application updates, visit:

they work. For more information,visit ivanti.com.

https://www.ivanti.com/support/supported-products

Copyright © 2023, Ivanti. All rights reserved. IVI-1623 02/23 DH/MM1. IBM Security, “2021 Cost of a Data Breach Report”, 28 July 2021.
https://www.ibm.com/security/data-breach